LDAP Query - name resolution to Mail Address

hcl-bot · April 7, 2009, 7:41am

Hello,

i’d like to query the nab for group membership via LDAP from an Ironport Mail Firewall.

It does work fine, as long as the users Mail Address is used in the group. As soon as i use the Domino Name, the query fails.

Is it possible to query group membership with E-Mail Address for groups having only notes names?

Here’s the query from the Ironport “(&(objectclass=dominoGroup)(cn={g})(member=*{a}))”

Any idea?

hcl-bot · April 10, 2009, 4:01pm

Subject: DominoAccessGroups

have you tried using the DominoAccessGroups attribute?

its similar to AD’s memberof attribute